A new feature you will find in firewalld that is more aimed at mobile systems—such as laptops—is the inclusion of zones. However, these zones can be equally used on a multihomed system, which associates different NICs with appropriate zones. Using zones in either mobile or multihomed systems, firewall rules can be assigned to zones and these rules will be associated with NICs included in that zone. If an interface is not assigned explicitly to a zone, then it will become a part of the default zone. To interrogate the default zone on your system, we can use the firewall-cmd command, as shown in the following command line:

# firewall-cmd --get-default-zone

Should you need to list all the configured zones on your system, the following command can be used:

# firewall-cmd --get-zones

The following screenshot demonstrates this command and the default zones on RHEL 7.1:

Perhaps more usefully, we can display zones with interfaces assigned to them; if no assignments have been made...